Staff Product Security Engineer

Join Ambience, a company that runs real-time clinical workflows inside some of the country's most security-sensitive health systems. As a Staff Security Engineer, you will play a crucial role in designing, building, and operating secure products. You will partner with engineering teams, own security analysis and technical requirements, and contribute code where it creates the most leverage. This is a senior technical role that requires deep product security expertise and a strong software engineering foundation.

• Conception et mise en œuvre de systèmes sécurisés, en guidant les initiatives depuis les propositions de conception jusqu'à la vérification.
• Responsabilité pour l'analyse de sécurité, les exigences techniques, les décisions de risque et les outils, et contribution au code lorsque cela crée le plus d'impact.
• Partenariat avec l'ingénierie pour réduire les risques dans l'environnement AWS, en appliquant des principes de sécurité solides tout en développant une expertise AWS plus approfondie.

• AI-augmented security engineering. You use AI as a force multiplier to develop depth in unfamiliar domains, expand your coverage, and move with greater speed. You validate its output against first principles and remain accountable for every technical and security decision
• Based in the Bay Area and able to work from our San Francisco office three days per week
• Tooling ownership. You’ve owned security tooling or automation beyond deployment, including integration, tuning, triage, maintenance, and evaluation
• Engineering roots. You’ve shipped production code, built meaningful software or automation recently, and are strong in at least one backend or automation language such as Go, Python, Java, or TypeScript. You see security as an engineering problem, not a compliance checklist
• Product security depth. You understand authentication and authorization—including OAuth, OIDC, SAML, JWT, RBAC, and ReBAC—as well as API security, threat modeling, secure code review, vulnerability testing, and multi-tenant SaaS handling sensitive data. You can move from an architecture diagram into the implementation path that matters
• Staff-level product security judgment. You have the depth to operate independently across complex product security challenges—typically developed through 8+ years of experience—and the range to extend into adjacent areas such as cloud security. You don’t just find vulnerabilities; you design systems that prevent entire classes of them
• Demonstrated influence. You’ve helped engineering teams understand, prioritize, remediate, and verify material security risks
• Cloud security fluency or aptitude. You have working knowledge of cloud security concepts such as IAM, network architecture, workload isolation, secrets, and logging—or a demonstrated ability to develop that expertise quickly
• Offensive validation instincts. You can reproduce vulnerabilities, conduct targeted dynamic testing, build proof-of-concept exploits, and distinguish exploitable risk from theoretical concern
• Experience securing healthcare systems, PHI, or similarly regulated data
• Experience designing or securing relationship-based or fine-grained authorization systems
• Offensive security or red-team depth used to demonstrate impact and influence priorities
• Experience securing enterprise AI applications, AI-enabled products, or internal AI adoption
• Deep AWS security experience, including IAM, network architecture, workload isolation, configuration management, and CNAPP operations